EurekaLog 6.1.04 Application: ------------------------------------------------------ 1.1 Start Date : Wed, 7 Dec 2016 09:26:00 +1000 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 16.12.4.9626 1.4 Parameters : 1.5 Compilation Date: Mon, 5 Dec 2016 06:19:14 +1000 1.6 Up Time : 5 minutes, 35 seconds Exception: ----------------------------------------------------------- 2.1 Date : Wed, 7 Dec 2016 09:31:35 +1000 2.2 Address : 77E3F8DC 2.3 Module Name : ntdll.dll - (Системная библиотека NT) 2.4 Module Version: 6.2.14393.447 2.5 Type : EFrozenApplication 2.6 Message : The application seems to be frozen. 2.7 ID : 911A 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeShutdownPrivilege - OFF SeChangeNotifyPrivilege - ON SeUndockPrivilege - OFF SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF Computer: ---------------------------------------------------------------------------- 5.3 Free Memory : 3205 Mb 5.5 Free Disk : 151,03 Gb 5.7 Processor : Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz 5.8 Display Mode: 3840 x 2160, 32 bit 5.9 Display DPI : 144 5.10 Video Card : NVIDIA Quadro K1200 (driver 21.21.13.7586 - RAM 4095 MB) Operating System: ---------------------------------------------- 6.1 Type : Microsoft Windows 6.2 (64 bit) 6.2 Build # : 9200 6.3 Update : 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=18516; Priority=1; Class=; [Main] | |------------------------------------------------------------------------------------------------------------------------------------------------------------------| |77E3F8DC|ntdll.dll | | |ZwWaitForAlertByThreadId | | |77E3F8D0|ntdll.dll | | |ZwWaitForAlertByThreadId | | |0061664C|SASPlanet.Debug.exe|u_ReadWriteSyncSRW.pas |TSynchronizerSRW |BeginWrite |180[1] | |00D81097|SASPlanet.Debug.exe|u_ViewPortState.pas |TViewPortState |ChangeViewSize |274[8] | |006608B8|SASPlanet.Debug.exe|GR32_Layers.pas |TCustomLayer |DoPaint |727[1] | |00667018|SASPlanet.Debug.exe|GR32_MicroTiles.pas |TMicroTilesRepaintOptimizer |UpdateOldInvalidTiles |1297[17] | |0066B84C|SASPlanet.Debug.exe|GR32_Image.pas |TCustomPaintBox32 |ForceFullInvalidate |841[3] | |0066BBAC|SASPlanet.Debug.exe|GR32_Image.pas |TCustomPaintBox32 |ResizeBuffer |957[37] | |00DC2740|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |mapResize |4313[2] | |0066BAC7|SASPlanet.Debug.exe|GR32_Image.pas |TCustomPaintBox32 |Resize |913[3] | |0066BAB4|SASPlanet.Debug.exe|GR32_Image.pas |TCustomPaintBox32 |Resize |910[0] | |0066D560|SASPlanet.Debug.exe|GR32_Image.pas |TCustomImage32 |Resize |1805[2] | |77BC0DE0|user32.dll | | |GetClientRect | | |00706169|SASPlanet.Debug.exe|TB2Dock.pas |TTBCustomDockableWindow |SetBounds |3300[27] | |0070600C|SASPlanet.Debug.exe|TB2Dock.pas |TTBCustomDockableWindow |SetBounds |3273[0] | |008CC734|SASPlanet.Debug.exe|TBXDkPanels.pas |TTBXDockablePanel |SetBounds |1775[1] | |00702959|SASPlanet.Debug.exe|TB2Dock.pas |TTBDock |ChangeWidthHeight |1156[3] | |00702938|SASPlanet.Debug.exe|TB2Dock.pas |TTBDock |ChangeWidthHeight |1153[0] | |00703A6F|SASPlanet.Debug.exe|TB2Dock.pas |TTBDock |ArrangeToolbars |1711[441]| |00705EDB|SASPlanet.Debug.exe|TB2Dock.pas |TTBCustomDockableWindow |ChangeSize |3227[2] | |00705EB4|SASPlanet.Debug.exe|TB2Dock.pas |TTBCustomDockableWindow |ChangeSize |3225[0] | |0071D527|SASPlanet.Debug.exe|TB2Item.pas | |Finalization |7141[3] | |00719617|SASPlanet.Debug.exe|TB2Item.pas |TTBView |DoUpdatePositions |5188[11] | |007195B4|SASPlanet.Debug.exe|TB2Item.pas |TTBView |DoUpdatePositions |5177[0] | |0071D5D6|SASPlanet.Debug.exe|TB2Item.pas | |Finalization |7141[3] | |00719655|SASPlanet.Debug.exe|TB2Item.pas |TTBView |UpdatePositions |5200[4] | |00719640|SASPlanet.Debug.exe|TB2Item.pas |TTBView |UpdatePositions |5197[1] | |0071E935|SASPlanet.Debug.exe|TB2Toolbar.pas |TTBCustomToolbar |DoArrange |1320[4] | |00705FE7|SASPlanet.Debug.exe|TB2Dock.pas |TTBCustomDockableWindow |Arrange |3266[14] | |00705F8C|SASPlanet.Debug.exe|TB2Dock.pas |TTBCustomDockableWindow |Arrange |3252[0] | |0071D9ED|SASPlanet.Debug.exe|TB2Item.pas | |Finalization |7141[3] | |0066BF95|SASPlanet.Debug.exe|GR32_Image.pas |TCustomImage32 |BitmapChangeHandler |1149[2] | |00675AD9|SASPlanet.Debug.exe|GR32.pas |TNotifiablePersistent |Changed |1838[1] | |00675AC4|SASPlanet.Debug.exe|GR32.pas |TNotifiablePersistent |Changed |1837[0] | |0067C884|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |Changed |5380[5] | |00659629|SASPlanet.Debug.exe|GR32_Resamplers.pas | |BlockTransfer |952[33] | |0065963C|SASPlanet.Debug.exe|GR32_Resamplers.pas | |BlockTransfer |953[34] | |00659470|SASPlanet.Debug.exe|GR32_Resamplers.pas | |BlockTransfer |919[0] | |0065943E|SASPlanet.Debug.exe|GR32_Resamplers.pas | |BlockTransfer |905[2] | |00659458|SASPlanet.Debug.exe|GR32_Resamplers.pas | |BlockTransfer |907[4] | |00DBC4F6|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |ProcessPosChangeMessage |2583[21] | |008065D8|SASPlanet.Debug.exe|u_LocalConverterChangeableOfMiniMap.pas |TLocalConverterChangeableOfMiniMap |OnConfigChange |238[8] | |0064484A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064586A|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0064807B|SASPlanet.Debug.exe|u_ChangeableBase.pas |TChangeableBase |DoInChangeNotify |98[1] | |0064804E|SASPlanet.Debug.exe|u_ChangeableBase.pas |TChangeableBase |DoChangeNotify |90[3] | |0064802C|SASPlanet.Debug.exe|u_ChangeableBase.pas |TChangeableBase |DoChangeNotify |87[0] | |00805CDF|SASPlanet.Debug.exe|u_LocalCoordConverterChangeable.pas |TLocalCoordConverterChangeable |DoChangeNotify |69[3] | |00805DF0|SASPlanet.Debug.exe|u_LocalCoordConverterChangeable.pas |TLocalCoordConverterChangeable |SetConverter |102[12] | |00D81539|SASPlanet.Debug.exe|u_ViewPortState.pas |TViewPortState |ChangeZoomWithFreezeAtVisualPointWithScale|379[13] | |00DBEBB1|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |zooming |3331[15] | |00DBEA5C|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |zooming |3316[0] | |00DC62FB|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormMouseWheel |5473[28] | |74BAAB4A|KERNELBASE.dll | | |CloseHandle | | |77E3DDEA|ntdll.dll | | |NtClose | | |74BAAB64|KERNELBASE.dll | | |CloseHandle | | |7632266A|win32u.dll | | |NtUserCallNextHookEx | | |77E3DD4A|ntdll.dll | | |NtCallbackReturn | | |77BBDF9B|user32.dll | | |DispatchMessageW | | |77BBDF90|user32.dll | | |DispatchMessageW | | |00DEDC01|SASPlanet.Debug.exe|SASPlanet.dpr | | |1478[32] | |770262C2|KERNEL32.DLL | | |BaseThreadInitThunk | | |------------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=18516; Priority=1; Class=; [Main] | |------------------------------------------------------------------------------------------------------------------------------------------------------------------| |0091043D|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |0091039C|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |00CB8836|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |674[227] | |00CB7A04|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |447[0] | |00DEDAB4|SASPlanet.Debug.exe|SASPlanet.dpr | | |1452[6] | |770262C2|KERNEL32.DLL | | |BaseThreadInitThunk | | |00645244|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |249[3] | |0064522C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[0] | |006450CD|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |183[6] | |00BEA9A6|SASPlanet.Debug.exe|u_MarkSystemImplChangeable.pas |TMarkSystemImplChangeable |OnAppStarted |225[2] | |0064484A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064586A|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0064656E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |180[10] | |00CB9DEC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1059[1] | |00CB9DCC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1058[0] | |00DB98F1|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1950[265]| |763224FA|win32u.dll | | |NtUserMessageCall | | |77BC0BFB|user32.dll | | |SendMessageW | | |77BC0AC0|user32.dll | | |SendMessageW | | |77BDE3E0|user32.dll | | |AttachThreadInput | | |77023FB0|KERNEL32.DLL | | |TlsGetValue | | |77BDE5B0|user32.dll | | |AttachThreadInput | | |77E3DD4A|ntdll.dll | | |NtCallbackReturn | | |00DEDC01|SASPlanet.Debug.exe|SASPlanet.dpr | | |1478[32] | |770262C2|KERNEL32.DLL | | |BaseThreadInitThunk | | |00645244|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |249[3] | |0064522C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[0] | |006450CD|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |183[6] | |00CB9E1E|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1063[5] | |00CB9DCC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1058[0] | |00DB98F1|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1950[265]| |763224FA|win32u.dll | | |NtUserMessageCall | | |77BC0BFB|user32.dll | | |SendMessageW | | |77BC0AC0|user32.dll | | |SendMessageW | | |77BDE3E0|user32.dll | | |AttachThreadInput | | |77023FB0|KERNEL32.DLL | | |TlsGetValue | | |77BDE5B0|user32.dll | | |AttachThreadInput | | |77E3DD4A|ntdll.dll | | |NtCallbackReturn | | |00DEDC01|SASPlanet.Debug.exe|SASPlanet.dpr | | |1478[32] | |770262C2|KERNEL32.DLL | | |BaseThreadInitThunk | | |00645244|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |249[3] | |0064522C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[0] | |006450CD|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |183[6] | |008DBE2D|SASPlanet.Debug.exe|u_BitmapTileMatrixChangeableWithThread.pas|TBitmapTileMatrixChangeableWithThread|OnAppStarted |254[1] | |0064484A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064586A|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0064656E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |180[10] | |00CB9DEC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1059[1] | |00CB9DCC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1058[0] | |00DB98F1|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1950[265]| |763224FA|win32u.dll | | |NtUserMessageCall | | |77BC0BFB|user32.dll | | |SendMessageW | | |77BC0AC0|user32.dll | | |SendMessageW | | |77BDE3E0|user32.dll | | |AttachThreadInput | | |77023FB0|KERNEL32.DLL | | |TlsGetValue | | |77BDE5B0|user32.dll | | |AttachThreadInput | | |77E3DD4A|ntdll.dll | | |NtCallbackReturn | | |00DEDC01|SASPlanet.Debug.exe|SASPlanet.dpr | | |1478[32] | |770262C2|KERNEL32.DLL | | |BaseThreadInitThunk | | |00645244|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |249[3] | |0064522C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[0] | |006450CD|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |183[6] | |008DBE2D|SASPlanet.Debug.exe|u_BitmapTileMatrixChangeableWithThread.pas|TBitmapTileMatrixChangeableWithThread|OnAppStarted |254[1] | |0064484A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064586A|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0064656E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |180[10] | |00CB9DEC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1059[1] | |00CB9DCC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1058[0] | |00DB98F1|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1950[265]| |763224FA|win32u.dll | | |NtUserMessageCall | | |77BC0BFB|user32.dll | | |SendMessageW | | |77BC0AC0|user32.dll | | |SendMessageW | | |77BDE3E0|user32.dll | | |AttachThreadInput | | |77023FB0|KERNEL32.DLL | | |TlsGetValue | | |77BDE5B0|user32.dll | | |AttachThreadInput | | |77E3DD4A|ntdll.dll | | |NtCallbackReturn | | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|SASPlanet.Debug.exe | |16.12.4.9626 |11819520|2016-12-05 06:19:18|D:\Install\SAS.Planet.Nightly.161204.9626 | |010B0000|WINMMBASE.dll |Base Multimedia Extension API DLL |6.2.14393.0 |131208 |2016-07-16 21:42:50|C:\WINDOWS\SYSTEM32 | |015D0000|zlib1.dll |zlib data compression library |1.2.8.0 |92672 |2016-06-11 05:34:42|D:\Install\SAS.Planet.Nightly.161204.9626 | |0F1F0000|ltc_help32-118416.dll |Help Module |1.0.0.1 |138448 |2016-11-18 12:26:14|C:\Program Files (x86)\Raptr Inc\PlaysTV | |10000000|libpng16.dll |PNG image compression library |1.6.22.0 |200192 |2016-06-11 05:34:42|D:\Install\SAS.Planet.Nightly.161204.9626 | |53860000|pshook.dll |Punto Switcher hook module |4.2.6.1275 |28992 |2016-06-03 19:05:34|C:\Program Files (x86)\Yandex\Punto Switcher | |56750000|ieframe.DLL |Браузер |11.0.14393.447 |12175360|2016-11-02 20:30:54|C:\WINDOWS\SYSTEM32 | |579F0000|twinapi.appcore.dll |twinapi.appcore |6.2.14393.206 |975744 |2016-09-16 03:22:38|C:\WINDOWS\system32 | |57AF0000|dcomp.dll |Microsoft DirectComposition Library |6.2.14393.0 |1122344 |2016-07-16 21:42:50|C:\WINDOWS\system32 | |57C10000|dataexchange.dll |Data exchange |6.2.14393.206 |257536 |2016-09-16 02:56:44|C:\WINDOWS\system32 | |5B7E0000|dxgi.dll |DirectX Graphics Infrastructure |6.2.14393.0 |527880 |2016-07-16 21:42:50|C:\WINDOWS\system32 | |5B870000|d3d11.dll |Direct3D 11 Runtime |6.2.14393.351 |2276736 |2016-10-15 14:20:50|C:\WINDOWS\system32 | |5D0E0000|sxs.dll |Fusion 2.5 |6.2.14393.0 |524776 |2016-07-16 21:42:58|C:\WINDOWS\SYSTEM32 | |60E60000|ltc_game32-118416.dll |Game Module |1.0.0.1 |1853136 |2016-11-18 12:26:14|C:\Program Files (x86)\Raptr Inc\PlaysTV | |61E00000|sqlite3.dll |SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine.|3.15.0.0 |838887 |2016-11-10 06:46:34|D:\Install\SAS.Planet.Nightly.161204.9626 | |63C70000|FreeImage.dll |FreeImage library |3.17.0.0 |341504 |2016-06-11 05:34:42|D:\Install\SAS.Planet.Nightly.161204.9626 | |63CD0000|shdocvw.dll |Библиотека объектов документов и элементов управления оболочки |6.2.14393.0 |225280 |2016-07-16 21:43:06|C:\WINDOWS\SYSTEM32 | |63D60000|CityHash.dll | | |14336 |2013-08-25 17:29:28|D:\Install\SAS.Planet.Nightly.161204.9626 | |65E40000|apphelp.dll |Клиентская библиотека совместимости приложений |6.2.14393.0 |581120 |2016-07-16 21:42:46|C:\WINDOWS\system32 | |68090000|olepro32.dll |OLEPRO32.DLL |6.2.14393.447 |90624 |2016-11-02 20:31:26|C:\WINDOWS\SYSTEM32 | |68540000|geodesic.dll | |1.46.1.0 |53760 |2016-11-19 22:10:02|D:\Install\SAS.Planet.Nightly.161204.9626 | |6AD80000|jpeg62.dll | | |581941 |2016-11-10 06:46:34|D:\Install\SAS.Planet.Nightly.161204.9626 | |6BAB0000|WINNSI.DLL |Network Store Information RPC interface |6.2.14393.0 |26848 |2016-07-16 21:42:28|C:\WINDOWS\SYSTEM32 | |6BAC0000|WKSCLI.DLL |Workstation Service Client DLL |6.2.14393.0 |58368 |2016-07-16 21:42:56|C:\WINDOWS\SYSTEM32 | |6C170000|iertutil.dll |Служебная программа времени выполнения для Internet Explorer |11.0.14393.447 |2257104 |2016-11-02 21:09:58|C:\WINDOWS\SYSTEM32 | |6C3A0000|URLMON.DLL |Расширения OLE32 для Win32 |11.0.14393.447 |1595392 |2016-11-02 20:26:52|C:\WINDOWS\SYSTEM32 | |6C690000|wsock32.dll |Windows Socket 32-Bit DLL |6.2.14393.0 |16384 |2016-07-16 21:43:02|C:\WINDOWS\SYSTEM32 | |6C6A0000|ondemandconnroutehelper.dll|On Demand Connctiond Route Helper |6.2.14393.0 |50176 |2016-07-16 21:42:54|C:\WINDOWS\SYSTEM32 | |6CB70000|gpapi.dll |Клиентские функции API групповой политики |6.2.14393.0 |112120 |2016-07-16 21:42:48|C:\WINDOWS\SYSTEM32 | |6CBE0000|cryptnet.dll |Crypto Network Related API |6.2.14393.0 |134656 |2016-07-16 21:42:56|C:\Windows\System32 | |6D120000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.2.14393.0 |279040 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |6D1C0000|rasadhlp.dll |Remote Access AutoDial Helper |6.2.14393.0 |13312 |2016-07-16 21:43:02|C:\Windows\System32 | |6D200000|DNSAPI.dll |Динамическая библиотека API DNS-клиента |6.2.14393.206 |496872 |2016-09-16 03:37:16|C:\WINDOWS\SYSTEM32 | |6D2A0000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.2.14393.0 |306016 |2016-07-16 21:42:56|C:\WINDOWS\SYSTEM32 | |6D890000|WINSTA.dll |Winstation Library |6.2.14393.0 |257248 |2016-07-16 21:43:06|C:\WINDOWS\SYSTEM32 | |6F080000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.2.14393.0 |184416 |2016-07-16 21:42:56|C:\WINDOWS\system32 | |6F0B0000|CRYPTSP.dll |Cryptographic Service Provider API |6.2.14393.0 |68720 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |6FBD0000|dwmapi.dll |Интерфейс API диспетчера окон рабочего стола (Майкрософт) |6.2.14393.206 |113504 |2016-09-16 03:13:52|C:\WINDOWS\system32 | |6FC40000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.2.14393.0 |457728 |2016-07-16 21:43:06|C:\WINDOWS\system32 | |70260000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.14393.447 |2122080 |2016-11-02 21:04:50|C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9| |70470000|msimg32.dll |GDIEXT Client DLL |6.2.14393.0 |7168 |2016-07-16 21:42:50|C:\WINDOWS\SYSTEM32 | |70FE0000|winspool.drv |Драйвер диспетчера очереди Windows |6.2.14393.0 |413696 |2016-07-16 21:43:04|C:\WINDOWS\SYSTEM32 | |718A0000|wininet.dll |Расширения Интернета для Win32 |11.0.14393.447 |2256384 |2016-11-02 20:25:52|C:\WINDOWS\SYSTEM32 | |71AF0000|NETUTILS.DLL |Net Win32 API Helpers DLL |6.2.14393.0 |36680 |2016-07-16 21:42:56|C:\WINDOWS\SYSTEM32 | |72AA0000|winmm.dll |MCI API DLL |6.2.14393.0 |135376 |2016-07-16 21:42:50|C:\WINDOWS\SYSTEM32 | |72B20000|secur32.dll |Security Support Provider Interface |6.2.14393.0 |23552 |2016-07-16 21:43:02|C:\WINDOWS\SYSTEM32 | |734A0000|version.dll |Version Checking and File Installation Libraries |6.2.14393.0 |27360 |2016-07-16 21:43:06|C:\WINDOWS\SYSTEM32 | |735D0000|IPHLPAPI.DLL |API вспомогательного приложения IP |6.2.14393.0 |184416 |2016-07-16 21:42:56|C:\WINDOWS\SYSTEM32 | |73600000|winhttp.dll |Службы HTTP Windows |6.2.14393.351 |636928 |2016-10-15 13:44:18|C:\WINDOWS\SYSTEM32 | |737E0000|NETAPI32.dll |Net Win32 API DLL |6.2.14393.0 |69232 |2016-07-16 21:42:50|C:\WINDOWS\SYSTEM32 | |738E0000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.9247 |570512 |2016-07-16 21:43:10|C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9247_none_5090cb78bcba4a35 | |73C50000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.9247 |653968 |2016-07-16 21:43:10|C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9247_none_5090cb78bcba4a35 | |74210000|wtsapi32.dll |Windows Remote Desktop Session Host Server SDK APIs |6.2.14393.0 |53216 |2016-07-16 21:43:06|C:\WINDOWS\SYSTEM32 | |74380000|bcrypt.dll |Библиотека криптографических примитивов Windows |6.2.14393.0 |106896 |2016-07-16 21:42:56|C:\WINDOWS\SYSTEM32 | |74880000|CRYPTBASE.dll |Base cryptographic API DLL |6.2.14393.0 |31528 |2016-07-16 21:42:50|C:\WINDOWS\System32 | |74890000|SspiCli.dll |Security Support Provider Interface |6.2.14393.187 |117240 |2016-09-07 15:07:58|C:\WINDOWS\System32 | |748B0000|cfgmgr32.dll |Configuration Manager DLL |6.2.14393.0 |213848 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |748F0000|bcryptPrimitives.dll |Windows Cryptographic Primitives Library |6.2.14393.0 |367208 |2016-07-16 21:42:28|C:\WINDOWS\System32 | |74950000|ole32.dll |Microsoft OLE для Windows |6.2.14393.447 |959112 |2016-11-02 21:05:14|C:\WINDOWS\System32 | |74A40000|oleaut32.dll |OLEAUT32.DLL |6.2.14393.447 |601712 |2016-11-02 21:23:00|C:\WINDOWS\System32 | |74AE0000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.2.14393.321 |1705976 |2016-10-05 20:03:26|C:\WINDOWS\System32 | |74C90000|MSASN1.dll |ASN.1 Runtime APIs |6.2.14393.0 |49080 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |74CA0000|advapi32.dll |Расширенная библиотека API Windows 32 |6.2.14393.0 |482392 |2016-07-16 21:42:50|C:\WINDOWS\System32 | |74D20000|combase.dll |Microsoft COM для Windows |6.2.14393.351 |2166232 |2016-10-15 14:18:02|C:\WINDOWS\System32 | |74F40000|shell32.dll |Общая библиотека оболочки Windows |6.2.14393.447 |20969928|2016-11-02 21:05:18|C:\WINDOWS\System32 | |76320000|win32u.dll |Win32u |6.2.14393.51 |79536 |2016-08-02 14:47:22|C:\WINDOWS\System32 | |76340000|WINTRUST.dll |Microsoft Trust Verification APIs |6.2.14393.351 |272720 |2016-10-15 14:19:02|C:\WINDOWS\System32 | |76390000|comdlg32.dll |Библиотека общих диалоговых окон |6.2.14393.447 |912896 |2016-11-02 20:26:48|C:\WINDOWS\System32 | |76480000|powrprof.dll |DLL модуля поддержки профиля управления питанием |6.2.14393.0 |275832 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |764D0000|profapi.dll |User Profile Basic API |6.2.14393.0 |54752 |2016-07-16 21:42:50|C:\WINDOWS\System32 | |764E0000|shlwapi.dll |Библиотека небольших программ оболочки |6.2.14393.0 |284056 |2016-07-16 21:43:04|C:\WINDOWS\System32 | |76530000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.2.14393.82 |790760 |2016-08-06 14:17:46|C:\WINDOWS\System32 | |76600000|MSCTF.dll |Серверная библиотека MSCTF |6.2.14393.447 |1263856 |2016-11-02 21:01:22|C:\WINDOWS\System32 | |76740000|IMM32.DLL |Multi-User Windows IMM32 API Client DLL |6.2.14393.0 |144632 |2016-07-16 21:42:50|C:\WINDOWS\System32 | |76770000|gdi32full.dll |GDI Client DLL |6.2.14393.447 |1415744 |2016-11-02 21:01:32|C:\WINDOWS\System32 | |76930000|PSAPI.DLL |Process Status Helper |6.2.14393.0 |17048 |2016-07-16 21:42:46|C:\WINDOWS\System32 | |76940000|kernel.appcore.dll |AppModel API Host |6.2.14393.0 |43416 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |76950000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.2.14393.0 |255168 |2016-07-16 21:42:50|C:\WINDOWS\System32 | |76A00000|shcore.dll |SHCORE |6.2.14393.0 |549088 |2016-07-16 21:42:44|C:\WINDOWS\System32 | |76A90000|msvcp_win.dll |Microsoft® C Runtime Library |6.2.14393.0 |498408 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |76B10000|ucrtbase.dll |Microsoft® C Runtime Library |6.2.14393.0 |918304 |2016-07-16 21:42:56|C:\WINDOWS\System32 | |77010000|KERNEL32.DLL |Библиотека клиента Windows NT BASE API |6.2.14393.0 |616048 |2016-07-16 21:42:46|C:\WINDOWS\System32 | |77260000|windows.storage.dll |API хранения Microsoft WinRT |6.2.14393.206 |5722320 |2016-09-16 03:22:42|C:\WINDOWS\System32 | |777D0000|NSI.dll |NSI User-mode interface DLL |6.2.14393.0 |20152 |2016-07-16 21:42:28|C:\WINDOWS\System32 | |777E0000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.2.14393.206 |402352 |2016-09-16 03:37:06|C:\WINDOWS\System32 | |77850000|clbcatq.dll |COM+ Configuration Catalog |2001.12.10941.16384|528360 |2016-07-16 21:42:48|C:\WINDOWS\System32 | |778E0000|GDI32.dll |GDI Client DLL |6.2.14393.206 |170960 |2016-09-16 03:23:20|C:\WINDOWS\System32 | |77910000|imagehlp.dll |Windows NT Image Helper |6.2.14393.0 |93984 |2016-07-16 21:42:28|C:\WINDOWS\System32 | |779D0000|crypt32.dll |API32 криптографии |6.2.14393.351 |1556712 |2016-10-15 14:18:40|C:\WINDOWS\System32 | |77BB0000|user32.dll |Многопользовательская библиотека клиента USER API Windows |6.2.14393.351 |1435896 |2016-10-15 14:11:24|C:\WINDOWS\System32 | |77D10000|msvcrt.dll |Windows NT CRT DLL |7.0.14393.0 |773168 |2016-07-16 21:42:50|C:\WINDOWS\System32 | |77DD0000|ntdll.dll |Системная библиотека NT |6.2.14393.447 |1570672 |2016-11-02 21:23:00|C:\WINDOWS\SYSTEM32 | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |168 | | |388 |smss.exe | | |0 |Above-Normal|2 | | |516 |services.exe | | |0 |Normal |6 | | |524 |lsass.exe | | |0 |Normal |9 | | |580 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |55 | | |612 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |14 | | |720 |csrss.exe | | |0 |High |12 | | |748 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |27 | | |836 |wininit.exe | | |0 |High |1 | | |1004 |winlogon.exe | | |0 |High |4 | | |1036 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |49 | | |1076 |WmiPrvSE.exe |WMI Provider Host |10.0.14393.0 |0 |Normal |3 | | |1104 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |18 | | |1136 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |23 | | |1164 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |19 | | |1344 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |27 | | |1400 |ps64ldr.exe | | |0 |Normal |1 | | |1540 |NVDisplay.Container.exe | | |0 |Normal |10 | | |1668 |winwfpmonitor.exe | | |0 |Normal |5 | | |1792 |eeupdate.exe |eeupdate 16.3.0 © Emurasoft, Inc. |16.3.0.0 |0 |Normal |14 |C:\Users\69BF~1\AppData\Local\Temp\e3d613ca75ecbc0402272ba0243953c1| |1820 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |8 | | |1900 |conhost.exe | | |0 |Below-Normal|3 | | |1964 |nvwmi64.exe | | |0 |Normal |3 | | |2016 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |10 | | |2076 |TOTALCMD64.EXE | | |0 |Normal |13 | | |2124 |spoolsv.exe | | |0 |Normal |30 | | |2300 |avpsus.exe | | |0 |Normal |14 | | |2476 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |8 | | |2504 |HPLaserJetService.exe | | |0 |Normal |14 | | |2524 |klnagent.exe | | |0 |Normal |34 | | |2532 |armsvc.exe | | |0 |Normal |2 | | |2544 |AdAppMgrSvc.exe | | |0 |Normal |6 | | |2552 |AGSService.exe | | |0 |Normal |5 | | |2584 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |14 | | |2660 |LogiRegistryService.exe | | |0 |Normal |3 | | |2736 |PDFProFiltSrvPP.exe | | |0 |Normal |3 | | |2772 |plays_service.exe | | |0 |Normal |2 | | |2820 |QipGuard.exe |QIP Internet Guardian |2.7.2.0 |0 |Normal |4 |C:\Users\Громов\AppData\Roaming\QipGuard | |2876 |nvtray.exe | | |0 |Normal |7 | | |2888 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |7 | | |2896 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |15 | | |2916 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |10 | | |2924 |avp.exe | | |0 |Normal |112 | | |2940 |XeroxPrintJobEventManagerService.exe | | |0 |Normal |2 | | |3220 |Memory Compression | | |0 |Normal |184 | | |3376 |dasHost.exe | | |0 |Normal |9 | | |3616 |SASPlanet.Debug.exe | |16.12.4.9626 |0 |Normal |33 |D:\Install\SAS.Planet.Nightly.161204.9626 | |3728 |msiexec.exe |Установщик Windows® |5.0.14393.0 |0 |Normal |6 | | |4472 |unsecapp.exe | | |0 |Normal |2 | | |4812 |vapm.exe | | |0 |Normal |20 | | |5116 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |4 | | |5160 |ApplicationFrameHost.exe | | |0 |Normal |4 | | |5292 |DbxSvc.exe | | |0 |Normal |23 | | |5328 |csrss.exe | | |0 |High |14 | | |5396 |hpwuschd2.exe |hpwuSchd Application |80.1.1.0 |0 |Normal |1 |C:\Program Files (x86)\HP\HP Software Update | |5648 |WmiPrvSE.exe |WMI Provider Host |10.0.14393.0 |0 |Normal |3 | | |5736 |OneDrive.exe |Microsoft OneDrive |17.3.6517.809 |0 |Normal |13 |C:\Users\Громов\AppData\Local\Microsoft\OneDrive | |5880 |ProductPointService.exe | | |0 |Normal |5 | | |5920 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |3 | | |6248 |WINWORD.EXE | | |0 |Normal |22 | | |6472 |SearchIndexer.exe |Индексатор службы Microsoft Windows Search |7.0.14393.206 |0 |Normal |18 | | |6568 |QtWebEngineProcess.exe | | |0 |Low |8 |C:\PROGRA~2\RAPTRI~1\PlaysTV | |7524 |QtWebEngineProcess.exe | | |0 |Normal |9 |C:\PROGRA~2\RAPTRI~1\PlaysTV | |7588 |audiodg.exe | | |0 |Normal |7 | | |7692 |emed64_16.3.1.exe |This installer database contains the logic and data required to install EmEditor (64-bit).|16.3.1.0 |0 |Normal |7 |C:\ProgramData\Emurasoft\EmEditor\updates\update64_14 | |8120 |RuntimeBroker.exe | | |0 |Normal |12 | | |8156 |dllhost.exe |COM Surrogate |10.0.14393.0 |0 |Normal |2 | | |8184 |EXCEL.EXE | | |0 |Normal |27 | | |8752 |fdm.exe | | |0 |Normal |48 | | |8920 |dwm.exe | | |0 |High |14 | | |9368 |svchost.exe |Хост-процесс для служб Windows |10.0.14393.0 |0 |Normal |15 | | |9484 |taskhostw.exe | | |0 |Normal |3 | | |9864 |LCore.exe | | |0 |Normal |18 | | |9892 |NVIDIA Web Helper.exe |NVIDIA Web Helper Service |6.7.0.0 |0 |Below-Normal|17 |C:\Program Files (x86)\NVIDIA Corporation\NvNode | |9972 |AdAppMgrUpdater.exe | | |0 |Normal |2 | | |10908|PdfPro7Hook.exe |PdfPro7Hook.exe |7.2.12578.1819 |0 |Normal |2 |C:\Program Files (x86)\Nuance\PDFViewer | |10996|HPSupportSolutionsFrameworkService.exe| | |0 |Normal |5 | | |11220|explorer.exe |Проводник |10.0.14393.447 |0 |Normal |99 | | |11424|ibuilder.exe |iBuilder |13.0.1.2 |0 |Normal |5 |C:\Program Files (x86)\iDIRECT\NMS\13.0.1.2 | |11464|QtWebEngineProcess.exe | | |0 |Normal |9 |C:\PROGRA~2\RAPTRI~1\PlaysTV | |11728|SearchProtocolHost.exe |Microsoft Windows Search Protocol Host |7.0.14393.206 |0 |Low |7 | | |11980|AdSync.exe | | |0 |Normal |10 | | |12040|Calculator.exe | | |0 |Normal |29 | | |12480|SkypeHost.exe | | |0 |Normal |13 | | |12548|msiexec.exe |Установщик Windows® |5.0.14393.0 |0 |Normal |9 | | |12576|sihost.exe | | |0 |Normal |11 | | |12612|avp.exe | | |0 |Normal |10 | | |12700|firefox.exe | | |0 |Normal |11 | | |12728|nvxdsync.exe | | |0 |Normal |12 | | |13056|nvwirelesscontroller.exe | | |0 |Normal |8 | | |13704|plays_ep64.exe | | |0 |Normal |2 | | |13796|taskhostw.exe | | |0 |Normal |15 | | |14188|jusched.exe |Java Update Scheduler |2.8.111.14 |0 |Normal |1 |C:\Program Files (x86)\Common Files\Java\Java Update | |15012|thunderbird.exe | | |0 |Normal |60 | | |15140|PdfCreate7Hook.exe |PdfCreate7Hook.exe |6.0.0.0 |0 |Normal |2 |C:\Program Files (x86)\Nuance\PDFCreate | |15148|Dropbox.exe |Dropbox |15.4.22.0 |0 |Normal |98 |C:\Program Files (x86)\Dropbox\Client | |15412|iMonitor.exe |iMonitor |13.0.1.2 |0 |Normal |7 |C:\Program Files (x86)\iDIRECT\NMS\13.0.1.2 | |15640|nvcontainer.exe | | |0 |Normal |22 | | |15976|acwebbrowser.exe |Chromium host executable |2.0.1.0 |0 |Normal |25 |C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser | |16060|firefox.exe | | |0 |Normal |55 | | |16096|SearchFilterHost.exe |Microsoft Windows Search Filter Host |7.0.14393.0 |0 |Low |4 | | |16136|acrotray.exe |AcroTray |15.20.20039.7108|0 |Normal |2 |C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat | |16316|nvwmi64.exe | | |0 |Normal |4 | | |16376|conhost.exe | | |0 |Below-Normal|1 | | |16440|Microsoft.Photos.exe | | |0 |Normal |35 | | |16644|punto.exe |Punto Switcher |4.2.6.1275 |0 |Normal |4 |C:\Program Files (x86)\Yandex\Punto Switcher | |16752|fontdrvhost.exe |Usermode Font Driver Host |10.0.14393.447 |0 |Normal |5 | | |16840|pptd40nt.exe |PaperPort Print to Desktop for NT |14.5.13264.1414 |0 |Normal |2 |C:\Program Files (x86)\Nuance\PaperPort | |17192|msiexec.exe |Установщик Windows® |5.0.14393.0 |0 |Normal |4 | | |17200|nvcontainer.exe |NVIDIA Container |1.1.2136.1721 |0 |Normal |29 |C:\Program Files (x86)\NVIDIA Corporation\NvContainer | |17352|QtWebEngineProcess.exe | | |0 |Normal |9 |C:\PROGRA~2\RAPTRI~1\PlaysTV | |17508|YandexDisk.exe | | |0 |Normal |37 | | |17524|Skype.exe |Skype |7.29.0.102 |0 |Normal |57 |C:\Program Files (x86)\Skype\Phone | |17596|playstv.exe | | |0 |Normal |35 | | |17600|qip.exe |QIP 2012 |4.0.0.9380 |0 |Normal |64 |C:\Program Files (x86)\QIP 2012 | |17652|PDFXEdit.exe | | |0 |Normal |6 | | |18180|AutodeskDesktopApp.exe |Autodesk Desktop App |6.0.108.150 |0 |Normal |12 |C:\Program Files (x86)\Autodesk\Autodesk Desktop App | |18624|acwebbrowser.exe |Chromium host executable |2.0.1.0 |0 |Normal |11 |C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser | |18676|SearchUI.exe | | |0 |Normal |38 | | |18820|emed64_16.3.1.exe |This installer database contains the logic and data required to install EmEditor (64-bit).|16.3.1.0 |0 |Normal |13 |C:\ProgramData\Emurasoft\EmEditor\updates\update64_14 | |19036|acwebbrowser.exe |Chromium host executable |2.0.1.0 |0 |Normal |15 |C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser | |19188|EmEditor.exe |EmEditor |16.3.0.0 |0 |Normal |9 | | |19240|ShellExperienceHost.exe | | |0 |Normal |31 | | |19296|firefox.exe | | |0 |Normal |40 | | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ------------------------------------------------------ ; ZwWaitForAlertByThreadId ; ------------------------- 77E3F8D4 add [edx+$77E52430], bh 77E3F8DA call edx 77E3F8DC ret $08 ; <-- EXCEPTION 77E3F8DE add [eax+$1BDB8], dl ; ; NtWaitForDebugEvent ; -------------------- 77E3F8E4 add [edx+$77E52430], bh 77E3F8EA call edx 77E3F8EC ret $10 Registers: ----------------------------- EAX: ???? EDI: ???? EBX: ???? ESI: ???? ECX: ???? ESP: ???? EDX: ???? EIP: ???? Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0019EEF4: 77E0AFA8 143AF590: C2 08 00 90 B8 BD 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EEF8: 0FC8E1E0 143AF5A0: C2 10 00 90 B8 BE 01 15 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EEFC: 00000000 143AF5B0: C2 10 00 90 B8 BF 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF00: 0019F128 143AF5C0: C2 14 00 90 B8 C0 01 03 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF04: 0066D554 143AF5D0: C2 04 00 90 B8 C1 01 03 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF08: 00000DCF 143AF5E0: C2 04 00 90 B8 C2 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF0C: 0000075B 143AF5F0: C2 14 00 90 B8 C3 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF10: 00000DDA 143AF600: C3 8D 49 00 B8 C4 01 00 00 BA 30 24 E5 77 FF D2 ..I.......0$.w.. 0019EF14: 00000766 143AF610: C2 10 00 90 B8 C5 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF18: 00000000 143AF620: C2 08 00 90 B8 C6 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF1C: 00000001 143AF630: C2 04 00 90 B8 C7 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF20: 00000000 143AF640: C2 0C 00 90 B8 C8 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF24: 0019EF20 143AF650: C2 10 00 90 B8 C9 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF28: 00000000 143AF660: C2 14 00 90 B8 CA 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w.. 0019EF2C: 00004854 143AF670: C3 8D 49 00 B8 CB 01 00 00 BA 30 24 E5 77 FF D2 ..I.......0$.w.. 0019EF30: FFFFFFFE 143AF680: C2 08 00 90 B8 CC 01 00 00 BA 30 24 E5 77 FF D2 ..........0$.w..